Name: | nss-tools |
---|---|
Version: | 3.44.0 |
Release: | 9.el8_1 |
Architecture: | aarch64 |
Group: | Unspecified |
Size: | 4689542 |
License: | MPLv2.0 |
RPM: | nss-tools-3.44.0-9.el8_1.aarch64.rpm |
Source RPM: | nss-3.44.0-9.el8_1.src.rpm |
Build Date: | Mon Dec 09 2019 |
Build Host: | ca-arm-jenkins-builder-01 |
Vendor: | Oracle America |
URL: | http://www.mozilla.org/projects/security/pki/nss/ |
Summary: | Tools for the Network Security Services |
Description: | Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Install the nss-tools package if you need command-line tools to manipulate the NSS certificate and key database. |
- Fix out-of-bounds write in NSC_EncryptUpdate (#1775912)
- CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for all the CKM_NSS_IKE*_DERIVE mechanism.
- Backport fixes from 3.44.1
- Add continuous RNG test required by FIPS - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism
- Rebuild with the correct build target
- rebuild to try to retrigger CI tests
- Fix certutil man page - Fix extracting a public key from a private key for dh, ec, and dsa
- Disable TLS 1.3 under FIPS mode - Disable RSASSA-PKCS1-v1_5 in TLS 1.3 - Fix post-handshake auth transcript calculation if SSL_ENABLE_SESSION_TICKETS is set - Revert the change to use XDG basedirs (mozilla#818686)
- Add ike mechanisms in softokn - Add FIPS checks in softoken
- Update to NSS 3.44 - Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy - Use %autosetup - Clean up manual pages generation - Clean up %check - Remove prelink dependency, which is not available in RHEL-8 - Remove upstreamed patches